User Tools

Site Tools


stopdecrypter

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
stopdecrypter [2019/04/16 16:46]
gt500
stopdecrypter [2020/12/13 03:27] (current)
gt500
Line 1: Line 1:
 +<note warning>You should be using the [[https://www.emsisoft.com/ransomware-decryption-tools/stop-djvu|Emsisoft Decrypter for STOP Djvu]] instead of following the instructions below. You can find more information about the newer decrypter from Emsisoft at [[https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/|this link]].</note>
 +
 ====== Getting Your ID and MAC With STOPDecrypter ====== ====== Getting Your ID and MAC With STOPDecrypter ======
 \\ \\  \\ \\ 
 You can get STOPDecrypter from [[https://download.bleepingcomputer.com/demonslay335/STOPDecrypter.zip|this link]]. Once you're done downloading it, follow the instructions below. A number of the steps include pictures to make it easier to see what you're supposed to do. You can get STOPDecrypter from [[https://download.bleepingcomputer.com/demonslay335/STOPDecrypter.zip|this link]]. Once you're done downloading it, follow the instructions below. A number of the steps include pictures to make it easier to see what you're supposed to do.
  
-Note that it is important to run STOPDecrypter on the computer that was infected, unless you can supply the MAC addresses of the network adapters from the infected computer on your own.+Note that it is important to run STOPDecrypter on the computer that was infected. The output from STOPDecrypter is preferred over trying to supply the information yourself.
  
-The creator of STOPDecrypter has an FAQ at [[https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/page-50#entry4682102|this link]] with additional information.\\ \\ +The creator of STOPDecrypter has an FAQ at [[https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/page-50#entry4682102|this link]] with additional information. Any questions you have should be answered in the FAQ.\\ \\ 
  
   - Open the file you downloaded.\\ \\    - Open the file you downloaded.\\ \\ 
-  - When a window opens with two files in it ("README" and "STOPDecrypter"), double-click on the one named **STOPDecrypter**.\\ {{:stopdecrypter_001.png?direct&400|}}\\ \\  +  - When a window opens with two files in it ("README" and "STOPDecrypter"), double-click on the one named **STOPDecrypter**.\\ {{:stopdecrypter_new_001.png?direct&400|}}\\ \\  
-  - When STOPDecrypter opens, click on the **Select Directory** button.\\ {{:stopdecrypter_002.png?direct&400|}}\\ \\  +  - Windows will warn you about the application depending on other files. Click the **Extract all** button to prevent errors.\\ {{:stopdecrypter_new_002.png?direct&300|}}\\ \\  
-  - In the dialog that pops upclick on your username in the list to select it, and then click the **OK** button (feel free to select a folder with less files in it if you want this process to go faster).\\ {{:stopdecrypter_003.png?direct&200|}}\\ \\  +  - In the window that opens, click the **Extract** button to confirm extraction of the files.\\ {{:stopdecrypter_new_003.png?direct&400|}}\\ \\  
-  - Click on the **Decrypt** button.\\ {{:stopdecrypter_004.png?direct&400|}}\\ \\  +  - A window almost identical to the one in step 2 will open. This shows the extracted files. Double-click on **STOPDecrypter** again to run it.\\ {{:stopdecrypter_new_004.png?direct&400|}}\\ \\  
-  - When it's done, STOPDecrypter will say "[!] No keys were found for the following IDs" in the log output on the left side of its window, and below that it will list some information (ID and MAC address) that may be helpful in figuring out your decryption key.\\ {{:stopdecrypter_005.png?direct&400|}}\\ \\  +  - STOPDecrypter will display a message asking your if you have read [[https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/page-50#entry4682102|the FAQ]]. You must click **Yes** in order to continue. Please read the message before clicking "Yes".\\ {{:stopdecrypter_new_005.png?direct&300|}}\\ \\  
-  - Please copy this information, and paste it into a reply to the forum topic where you asked for help, or in a reply to the STOP ransomware help thread on the BleepingComputer forums at [[https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/|this link]].\\ \\ +  - STOPDecrypter will now open, and will show your ID'and MAC addresses in the box on the left.\\ {{:stopdecrypter_new_006.png?direct&400|}}\\ \\  
 +  - Please copy this information, and paste it into a reply to the forum post or e-mail where you were asked to follow these instructions. Alternately you can leave the information in a reply to the STOP ransomware help thread on the BleepingComputer forums at [[https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/|this link]].\\ \\ 
  
-Once your ID and MAC address have been posted, it can be forwarded to the creator of STOPDecrypter, or if it was posted in the BleepingComputer STOP ransomware help thread then he should find it himself and archive it. If he is ever able to figure out your decryption key, then you should be contacted with information on how to decrypt your files.+Once your ID and MAC address have been posted, it can be forwarded to the creator of STOPDecrypter, or if it was posted in the BleepingComputer STOP ransomware help thread then he should find it himself and archive it. If he is able to figure out your decryption key, then you should be contacted with information on how to decrypt your files.
stopdecrypter.1555447591.txt.gz · Last modified: 2019/04/16 16:46 by gt500